Assigning GPO to specific users on specific systems

[beerdini]

I am trying to develop a GPO that will only apply to my primary laptop users while they are using their laptop but am having trouble getting it just right. What this GPO is meant to accomplish is to alter the default my documents location for my laptop users only while using their laptops. If the user signs into another system I don't want it to apply, and if someone else who is not the laptop's primary assigned user signs in, I don't want it to apply.

I have both a Laptops group under my Computers container and a LaptopUsers group under my user's container in AD, but when I apply the GPO to both of these groups it seems to affect these users everywhere, not just on their assigned laptops. The GPO is meant to redirect the My Documents folder from a network location to a local system location which will sync back to the network, so when the laptop is out of the office My Documents are still available.

Thanks for any advice!

 

[MattPanton]

Put the GPO for the redirection into a sub OU of computers, link the GPO to that sub OU and then move the computers you want it to affect into that OU, in the scope/security options of the GPO, remove authenticated users and then enter the users you want the GPO to affect once you've done this, make sure its all tested.

I'm not an expert on GPO's and there is probably a much cleaner way to do it but thats how I've managed to do it in the past.

Regards

M